GCP Professional Cloud Architect Practice Question

Your security team has prohibited keeping any Google Cloud credentials on developer laptops. Developers still need a full-featured IDE to write, unit-test, and debug containerized microservices that will be deployed to a shared Google Kubernetes Engine (GKE) development cluster. They must be able to issue kubectl commands and open a browser-based preview of services running on an inner-loop development environment, but they cannot install the Cloud SDK or store credentials locally. Which approach best meets these requirements with the least additional setup effort?

Use Cloud Shell Editor in the Google Cloud console, leveraging its built-in Cloud Code extension to develop, run, and debug the microservices, execute kubectl with the pre-authenticated gcloud CLI, and expose test service ports through Cloud Shell Web Preview.
Set up Cloud Build triggers so that every Git commit automatically builds and deploys the service to GKE; developers debug issues by inspecting build logs instead of running code locally.
Require each developer to install the Cloud SDK and Cloud Code plugin for their desktop IDE, authenticate with user credentials, and run services locally on Minikube before pushing manifests to the GKE cluster.
Provision a shared bastion Compute Engine VM with the Cloud SDK pre-installed; have developers SSH into the host with IAP tunneling and use terminal editors (vim or emacs) to write code and deploy to GKE.

Report Issue

Answer Description

Cloud Shell runs on a Google-managed Compute Engine VM that is created on demand and pre-loaded with the gcloud CLI, kubectl, and other development tools. The Cloud Shell Editor (a web-based VS Code experience) is available directly in the console and comes with the Cloud Code extension already installed, providing language support, container build/run, and GKE deployment workflows. The gcloud CLI inside Cloud Shell is automatically authenticated with the user's Google account when the session starts, so no credential files are stored on the developer's laptop. Web Preview lets the editor securely expose local ports in the browser for live service testing. The alternative options either require local SDK installation, lack a modern IDE, or do not provide interactive inner-loop testing, so they do not satisfy both the security constraints and developer-productivity goals.

Ask Bash

Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.